Analysis
-
max time kernel
144s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
18-01-2024 03:10
General
-
Target
6451cb65255913a2c65c71d2eae996da.dll
-
Size
151KB
-
MD5
6451cb65255913a2c65c71d2eae996da
-
SHA1
2e8fbc4e0708055f10e272fca7b74acca8a15b82
-
SHA256
8fcdb3af5318bf4f89cf63a9dd0f6b94f224f4cd723cc1542429f607daa3b802
-
SHA512
a562c65793614a8efbcd6f4b86571f69e0d807fb64788e110961d8d5306b871e40ad1da4dc4c3ef233c4136ff2b1fff18a62ee0a49ab3e3155378546b97374b7
-
SSDEEP
1536:bgK+c+wl/9FhA++Hpn08IRv0h+gJ90LnriXgXDAbxYlBgU2Fkhx:bktKi++lsN0h5mnmwDQYlBgUg2x
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\6451cb65255913a2c65c71d2eae996da.dll,#11⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB